u-i-connect[.]com

This domain, u-i-connect.com, is flagged as an active brand impersonation threat designed to deceive users of the decentralized exchange Uniswap. The site mimics the official Uniswap interface, displaying the page title 'Uniswap | Trade Crypto on DeFi’s Leading Exchange' to appear legitimate. Analysis indicates the site functions as a crypto drainer, a type of attack that tricks victims into connecting their digital wallets, enabling unauthorized transactions that siphon funds without consent. The risk level is classified as high due to the direct financial threat posed to visitors who interact with the site’s wallet connection prompts. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain was registered on May 28, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with phishing infrastructure. It resolves to the IP address 104.21.79.40, hosted on Cloudflare’s network (AS13335), which is commonly used to obscure the true origin of malicious sites. Despite its active status, the domain currently shows 0 detections out of 95 security engines on VirusTotal, indicating it has not yet been widely flagged by automated scanning tools. The site lacks an SSL certificate, further reducing its apparent legitimacy. It appears on three security blocklists and is blocked by at least three independent threat intelligence feeds, including MetaMask’s built-in protections. Users who have visited u-i-connect.com or interacted with its content should take immediate action to mitigate potential risks. If a wallet was connected to the site, assume the private keys or seed phrase may be compromised. Transfer all assets to a new, secure wallet using a different device or browser profile to avoid residual session hijacking. Review all recent transactions for unauthorized activity, particularly those involving token approvals or contract interactions. Enable transaction simulation tools to preview wallet actions before execution. Monitor official communications from Uniswap for any security advisories, and report the domain to additional threat intelligence platforms to improve community defenses. Avoid clicking on any links associated with this domain, and verify all future interactions with Uniswap through the official website or verified social media channels.